Mask PHP_AUTH_PW header in profiler

lmcd · fabpot · commit e92b76c5ff54 · 2013-02-28T15:46:39.000+01:00
diff --git a/src/Symfony/Component/HttpKernel/DataCollector/RequestDataCollector.php b/src/Symfony/Component/HttpKernel/DataCollector/RequestDataCollector.php
@@ -99,6 +99,14 @@ public function collect(Request $request, Response $response, \Exception $except
             'locale'             => $request->getLocale(),
         );
 
+        if (isset($this->data['request_headers']['php-auth-pw'])) {
+            $this->data['request_headers']['php-auth-pw'] = '******';
+        }
+
+        if (isset($this->data['request_server']['PHP_AUTH_PW'])) {
+            $this->data['request_server']['PHP_AUTH_PW'] = '******';
+        }
+
         if (isset($this->controllers[$request])) {
             $controller = $this->controllers[$request];
             if (is_array($controller)) {
